v0.2.0

0.2.0 (2026-08-19)

Features

• add ClusterIssuers for cert-manager (ef1e23e)
• add Compliance-as-Code module foundation (ab797a5)
• add Gateway API base resources and examples (8e441fc)
• add missing Helm deployments and fix integration issues (913fc72)
• add Oracle Cloud (OCI/OKE) support (5865b4d)
• add root app-of-apps ArgoCD application (1b9b54c)
• add root app-of-apps for GitOps bootstrap (cce9df0)
• ci: add GitHub Actions workflows and pre-commit hooks (ca1e49e)
• cli: add mantl status command for platform visibility (09db494)
• cli: compute and show a compliance score in mantl status (64ea270)
• complete Compliance-as-Code implementation (29aa667)
• compliance: Add ComplianceFramework and ComplianceControl CRDs (aa87cfd)
• compliance: Add Evidence, Finding, and Audit CRDs (0fb2d08)
• compliance: Add Falco runtime rules and CLI design (a08f5ac)
• compliance: add pure audit scheduling helpers (6085acd)
• compliance: add pure template-to-policy resolver (67e7ab2)
• compliance: Add SOC2 Kyverno policy packs (098c5cb)
• compliance: author SOC2 Kyverno policies for previously-unresolved templates (136a9f3)
• compliance: generate CRDs for the compliance API (c60499a)
• compliance: Implement Compliance-as-Code platform (#66) (b31b294)
• compliance: requeue and rerun recurring audits on their frequency (4dc8b0c)
• compliance: resolve framework templates to policies and report gaps in status (5777c05)
• docs: add comprehensive operational runbooks (c8c74d4)
• docs: add operational runbooks for disaster recovery and scaling (d100096)
• dx: add comprehensive developer experience enhancements (1d7eff2)
• examples: add complete source code for e-commerce microservices (c57ceea)
• examples: add comprehensive example applications (64bd123)
• examples: add production-ready e-commerce microservices example (6e27b5d)
• expand AWS EKS blueprint with production configuration (c2e3a30)
• helm: add mantl-platform meta-chart with profile-based configuration (fd1aebb)
• helm: complete mantl-platform chart templates (34b750f)
• implement functional evidence mapping for compliance audits (#138) (7e3bb19)
• infra: add production security hardening across AWS, GCP, and Azure (8a4344e)
• infra: Enhance DigitalOcean blueprint documentation and CI testing (#110) (7535298)
• monitoring: implement comprehensive SLO monitoring and dashboards (9df9306)
• multi-cluster: add multi-cluster management with ArgoCD ApplicationSets (bbe4d67)
• observability: add Loki and Tempo to complete observability stack (fe93368)
• orchestration: implement comprehensive Kubernetes-Nomad integration (3f422ed)
• orchestration: implement comprehensive Kubernetes-Nomad integration (1770fd6)
• platform: add CNCF graduated observability and security stack (9899e67)
• platform: add GitOps manifests for all platform components (b85462c)
• security: add Kyverno policy-as-code implementation (72e4efe)
• security: expand Kyverno policies with comprehensive security controls (a3c6be4)
• terraform: add platform security module for enterprise features (e1524ca)
• terraform: integrate platform security across all provider blueprints (434e6fb)

Bug Fixes

• bin: make scripts executable and shellcheck-clean (b39d1b0)
• ci: add a yamllint config suited to the workflows (#255) (e51a1c7)
• ci: bump sonarqube-scan-action to v6 for security advisories (3c210dd)
• ci: limit Cloudflare Terraform PR checks (#235) (8db1ecf)
• ci: make check-placeholders and validate-kustomize-dev executable (01a1e24)
• ci: pin add-to-project action (#236) (2c06203)
• ci: use existing tfsec action tag (#233) (d540943)
• ci: use specific runner labels, fix codeql concurrency (3bef2f8)
• ci: use specific runner labels, fix codeql concurrency (8e1092f)
• compliance: parse framework mappings schema instead of silently dropping them (1bb1f5c)
• compliance: watch PolicyReports only when the CRD is present (44521ec)
• deps: bump black to 26.3.1 (security fix) (60822e3)
• deps: override uuid to 11.1.1 in frontend example (GHSA buffer bounds) (dac5dfc)
• deps: regenerate package-lock.json with security overrides (8653b24)
• deps: resolve Dependabot security alerts (#198) (7aea8d8)
• deps: update remaining Python dependencies (#237) (454e9bd)
• manifests: repair malformed first-party YAML (957f667)
• resolve critical Python linting issues (2a5622b)
• resolve critical Python linting issues (a446692)
• security: harden K8s endpoints, IAM, and outputs (#112) (c70b291)
• security: resolve npm vulnerabilities with overrides (4135eff)
• security: upgrade vulnerable Python packages (237905f)
• terraform: format tree and repair invalid blueprint configs (de11356)
• update dependencies and pin versions (6b04378)
• update dependencies and pin versions (55ac95a)
• update GitHub Actions versions and add workflow_dispatch (5517b22)
• update GitHub Copilot action reference and add Safety configuration (5f5a079)
• update GitHub Copilot action reference and add Safety configuration (af3424b)